Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: w01RO5Y54q6CyJjB9edFbA6PzrkDGcdCbPjYWS81P98=
Subject key identifier: 48:8B:DC:4B:4D:22:A4:19:1A:05:AD:70:E6:46:3A:EE:4A:B9:8B:E4
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 0198955B20175CAD6C2CE067F4C9AAE083B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 15C9
Signing time: Sun 10 Aug 2025 19:00:33 +0000
Manifest this update: Sun 10 Aug 2025 19:00:33 +0000
Manifest next update: Mon 11 Aug 2025 19:00:33 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: IT7L8VPFiRvLAAR65J+KS7E99FcvNosyrNJdNcUma9w=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:20:17:5c:ad:6c:2c:e0:67:f4:c9:aa:e0:83:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Aug 10 19:00:33 2025 GMT
Not After : Aug 11 19:00:33 2025 GMT
Subject: CN=488bdc4b4d22a4191a05ad70e6463aee4ab98be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:8c:91:1c:c9:6c:5f:e8:67:ab:8a:0c:8d:
12:f4:d1:90:8b:ee:73:9b:6c:63:64:87:5b:c4:96:
a5:50:78:dd:41:78:68:78:4e:34:cf:0d:ce:b4:1d:
cb:43:87:bb:3a:3c:17:05:ec:9c:6c:e4:e9:e7:53:
6c:44:50:65:e9:c0:13:f1:c5:0b:cd:d2:c6:39:d5:
e5:b0:94:31:da:de:33:90:f7:bc:e3:ca:b8:c9:dc:
e0:86:a1:a7:a7:dd:a1:54:7f:16:6c:83:5b:50:25:
b3:35:1c:70:12:b9:81:b4:bc:60:e1:15:01:58:d3:
24:86:84:92:d3:f3:ad:c7:a9:a9:44:1b:a6:4d:61:
81:a2:ec:be:dd:1d:cf:f0:42:a4:56:cc:a5:a4:88:
d7:12:8a:2a:94:08:27:02:cf:bc:ad:1b:0d:2a:7f:
4c:08:37:b2:30:56:20:de:51:fc:61:60:03:e7:9e:
64:31:e3:92:7d:b7:8c:e1:a5:77:ec:58:0a:4b:40:
05:29:cc:1d:5f:5f:26:ba:24:df:b2:24:46:f0:40:
11:ef:93:9d:9d:d7:c2:23:f5:f3:61:37:fc:15:46:
e4:0e:5b:29:15:5f:28:8a:0e:21:8c:4f:b8:d8:d7:
63:a1:07:0a:47:31:f3:10:12:9d:00:17:45:78:15:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8B:DC:4B:4D:22:A4:19:1A:05:AD:70:E6:46:3A:EE:4A:B9:8B:E4
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:18:65:07:a9:57:37:3f:a6:ad:02:62:85:74:e7:b0:25:1c:
a2:46:f4:b7:d6:eb:db:70:62:cb:31:e0:6a:1a:0c:6b:15:b1:
6b:2c:d0:43:d9:93:d5:82:f6:8c:a4:2f:a3:59:18:f7:d7:e7:
ab:17:15:65:14:46:b2:0f:25:f2:e9:70:a8:db:b7:48:11:53:
1c:53:5c:5f:c8:e4:ef:79:94:ec:93:44:2e:2e:3b:50:0e:4c:
fa:66:de:a4:2f:d8:16:6d:cc:ac:22:45:47:ab:ae:09:57:76:
49:c8:b7:af:4d:55:a9:b2:66:19:df:ef:48:ec:28:32:2a:4c:
01:e2:d2:4f:41:7c:d8:5c:7e:c0:fa:29:b4:be:d6:69:26:db:
fb:fe:cd:85:33:a2:66:98:9d:14:a2:24:c8:fa:53:50:b9:39:
80:86:54:04:35:ca:09:0b:cb:f1:8a:9a:f0:82:4d:6e:dd:d6:
75:f8:bd:e6:c9:f9:28:ef:d3:56:71:0f:ac:df:3c:63:ba:f6:
d7:a6:bd:bf:a9:88:6f:54:60:d7:62:c8:2d:93:73:13:c3:89:
88:48:80:d4:d6:b0:0e:96:90:cd:96:1b:17:2a:6d:27:7d:05:
08:f4:22:b2:d3:df:a5:d6:e8:ce:b7:06:13:7d:b7:9e:ac:cf:
58:55:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:45 2025 by rpki-client